Anonymization-processing evaluation system, anonymization-processing evaluation method, and computer readable medium

Abstract

A data reception unit (110) receives personal information data, anonymization-processed data, and means-specifying data. A means evaluation unit (120) performs, based on the personal information data and the anonymization-processed data, means evaluation which determines whether or not conversion from the personal information into the anonymization-processed personal information has been performed by applying the anonymization-processing rule specified by the means-specifying data. A criterion evaluation unit (130) performs, based on criterion determination data, criterion evaluation which determines an anonymization-processing criterion for a criterion determination rule which is the same as the anonymization-processing rule specified by the means-specifying data. A result output unit (140) integrates and outputs a result of the means evaluation and a result of the criterion evaluation.

1 . An anonymization-processing evaluation system comprising:
 processing circuitry   to receive personal information data indicating personal information, anonymization-processed data indicating anonymization-processed personal information, and means-specifying data for specifying an anonymization-processing rule which is for the personal information;   to perform, based on the personal information data and the anonymization-processed data, means evaluation which determines whether or not conversion from the personal information into the anonymization-processed personal information has been performed by applying the anonymization-processing rule specified by the means-specifying data;   to perform, based on criterion determination data indicating one or more criterion determination rules for one or more anonymization-processing criteria, criterion evaluation which determines an anonymization-processing criterion for a criterion determination rule which is the same as the anonymization-processing rule specified by the means-specifying data; and   to integrate and output a result of the means evaluation and a result of the criterion evaluation.   
     
     
         2 . The anonymization-processing evaluation system according to  claim 1 ,
 wherein the means-specifying data is anonymization-processing means data indicating the anonymization-processing rule, and   wherein the processing circuitry   performs the means evaluation on the anonymization-processing rule indicated in the anonymization-processing means data, and   performs the criterion evaluation on the anonymization-processing rule indicated in the anonymization-processing means data.   
     
     
         3 . The anonymization-processing evaluation system according to  claim 1 ,
 wherein the means-specifying data is an anonymization-processing program for performing anonymization processing according to the anonymization-processing rule, and   wherein the processing circuitry   specifies the anonymization-processing rule by analyzing the anonymization-processing program,   performs the means evaluation on the specified anonymization-processing rule, and   performs the criterion evaluation on the specified anonymization-processing rule.   
     
     
         4 . An anonymization-processing evaluation method comprising:
 receiving personal information data indicating personal information, anonymization-processed data indicating anonymization-processed personal information, and means-specifying data for specifying an anonymization-processing rule which is for the personal information;   performing means evaluation which determines whether or not conversion from the personal information into the anonymization-processed personal information has been performed by applying the anonymization-processing rule specified by the means-specifying data, based on the personal information data and the anonymization-processed data;   performing criterion evaluation which determines an anonymization-processing criterion for a criterion determination rule which is the same as the anonymization-processing rule specified by the means-specifying data, based on criterion determination data indicating one or more criterion determination rules for one or more anonymization-processing criteria; and   integrating and outputting a result of the means evaluation and a result of the criterion evaluation.   
     
     
         5 . A non-transitory computer readable medium storing an anonymization-processing evaluation program which causes a computer to execute:
 a data reception process of receiving personal information data indicating personal information, anonymization-processed data indicating anonymization-processed personal information, and means-specifying data for specifying an anonymization-processing rule which is for the personal information;   a means evaluation process of performing, based on the personal information data and the anonymization-processed data, means evaluation which determines whether or not conversion from the personal information into the anonymization-processed personal information has been performed by applying the anonymization-processing rule specified by the means-specifying data;   a criterion evaluation process of performing, based on criterion determination data indicating one or more criterion determination rules for one or more anonymization-processing criteria, criterion evaluation which determines an anonymization-processing criterion for a criterion determination rule which is the same as the anonymization-processing rule specified by the means-specifying data; and   a result output process of integrating and outputting a result of the means evaluation and a result of the criterion evaluation.